MartijnVisser opened a new pull request, #29514:
URL: https://github.com/apache/flink/pull/29514
## What is the purpose of the change
Replaces the open Dependabot PRs for commons-beanutils and jsoup. Supersedes
#28813, #28824, #28941 and #29511.
## Brief change log
- commons-beanutils 1.11.0 in flink-fs-hadoop-shaded, flink-s3-fs-hadoop,
flink-s3-fs-presto and the flink-sql-client test pin, plus the three NOTICE
files
- jsoup 1.23.2 in flink-docs (test scope)
The S3 file systems pin beanutils themselves, so #28813 alone would not have
changed the S3 jars. flink-yarn keeps its 1.8.3 test pin for the Hadoop 2
build, so its alerts stay open.
## Verifying this change
This change is already covered by existing tests: the S3 shaded jars bundle
the 1.11.0 classes, `-Pcheck-convergence` passes, and the license checker
passes on a `deploy` of the three modules (it fails if one NOTICE keeps 1.9.4).
`ConfigOptionsDocsCompletenessITCase` and the flink-sql-client tests pass.
## Does this pull request potentially affect one of the following parts:
- Dependencies (does it add or upgrade a dependency): yes
- The public API, i.e., is any changed class annotated with
`@Public(Evolving)`: no
- The serializers: no
- The runtime per-record code paths (performance sensitive): no
- Anything that affects deployment or recovery: JobManager (and its
components), Checkpointing, Kubernetes/Yarn, ZooKeeper: no
- The S3 file system connector: yes
## Documentation
- Does this pull request introduce a new feature? no
- If yes, how is the feature documented? not applicable
---
##### Was generative AI tooling used to co-author this PR?
- [X] Yes (please specify the tool below)
Generated-by: Claude Code (Claude Opus 5.5)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
